*.townebankmortgage.com
- TowneBank -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0a:84:d2:a9:ab:35:0c:32:42:c7:18:a1:ef:03:f9:a5 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
TowneBank
Organization:
TowneBank
State / Province:
Virginia
Locality: Suffolk
Country: US
Locality: Suffolk
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:84:d2:a9:ab:35:0c:32:42:c7:18:a1:ef:03:f9:a5Serial Number (int): 13981935891738055080902600380022782373
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e7:0e:9b:e3:99:dc:58:46:55:c1:02:e4:33:50:98:e2:ab:ba:24:32
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 79:41:85:2f:30:e0:8f:a3:20:70:ea:82:3d:86:52:a4:07:df:fa:5d
Fingerprint (sha256): 93:8e:e7:56:a5:29:72:66:cb:15:4c:90:41:81:ba:8c:38:45:f4:f3:1f:b2:24:e0:a0:85:df:a6:28:dc:38:4c
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate *.townebankmortgage.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.townebankmortgage.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
Other certificates including the domain name townebankmortgage.com
(limited to 100 certificates)
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
apply.townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
a.townebank.net
townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
townebankmortgage.com
*.townebankmortgage.com
apply.townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
*.townebankmortgage.com
a.townebank.net
townebankmortgage.com
www.townebankmortgage.com
*.townebankmortgage.com
www.townebankmortgage.com
www.townebankmortgage.com
Certificate
The complete raw certificate details for *.townebankmortgage.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIQCoTSqas1DDJCxxih7wP5pTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA1MDMwMDAwMDBaFw0yMTA1MDIxMjAwMDBaMGgxCzAJBgNVBAYTAlVTMREw DwYDVQQIEwhWaXJnaW5pYTEQMA4GA1UEBxMHU3VmZm9sazESMBAGA1UEChMJVG93 bmVCYW5rMSAwHgYDVQQDDBcqLnRvd25lYmFua21vcnRnYWdlLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCMt6roP65xb//dy5RC7zK1fYXrc26X UJ1Ji2q/F972E5wVaSX01DJqlrVfS2D8urgOMFDR4QMKB0mUkeKWwGKkyIFXMLrA z2ITQlVpYruSfCmF37klwezRAzz74gMzhsvWEJlq/iaZaR7udSNdRSBRFLO63zN7 znf/0ukCAUVTtpvPn9SmM3ZAJYZuK7C7KEAGrpwSnqDldgWZvbp87xOBJhD5cSCL dkpVyOWiaSZS9cOK/Cs9vccx6ancQMUrlzHraOcV9rqnG3pdV2UBvYMfLoOqUPCl 5WqHMTcvaLu7TA7M1VxTwZToP4ysGQkugBZZu2wf4LdFOBIvnnLOIdMCAwEAAaOC Az8wggM7MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQW BBTnDpvjmdxYRlXBAuQzUJjiq7okMjA5BgNVHREEMjAwghcqLnRvd25lYmFua21v cnRnYWdlLmNvbYIVdG93bmViYW5rbW9ydGdhZ2UuY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGg L4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3Js MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUGCCsGAQUFBwEBBGkwZzAm BggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPQYIKwYBBQUH MAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAx OC5jcnQwCQYDVR0TBAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA7ku9 t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFqf0K7UAAABAMARzBFAiEA 2hSbg+Woc2L9YJ4TK0OdU8ZTs9XGTFp76zQ6HI9sziUCIAWM2ckT/XwnHljp5cwA Xyx/IfACvul4DMLTcr1g+nbBAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq /16ggw8AAAFqf0K4JwAABAMARjBEAiAZCmCvyhjJSxhHP+vPURowOVUIWYFfwRTa tGRck9rmbAIgbcwXcocYlwBm34QEdSJVqwTKbqFAWiK584h+qIeiMu8AdgBElGUu sO7Or8RAB9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAWp/QrasAAAEAwBHMEUCIQCi wtZh/hNNaoybkXdhF97xFO2dl/SgjGSJEkn38FN7gwIgXUhkEL06EER2xz1RPJoV qLC5kiwWFWuhXTB5qDYmQ9cwDQYJKoZIhvcNAQELBQADggEBAD8uYPyIOjVfcoVm hCoGZxqS8Y+zPWxdf0sZCL6HjZYDHu5ANjVMo7oGSmsDx6kLVghjnvs9s7jqsS+j sPuRw+93Fi1UKIykjoFFGp3zAfF6DHXy4bm07V/nwutaybs2u2hM0RmcNV1juFNT m7sxQnCctgmh2wzhN9bq2UYtQdjnd52NBzp0ZJ5/n7LHiP/1TVCEk2KvQi/OtS4r TRm+KYYknYmY+PzO+AjsGiXcUPAb4oVB1gt94f6rAhTYqnuzxoHDQ9bewaKELh2w HYtgT/d9ZKUmA48/irCHwV0iXIFyfyFFtsTnnxd7gwxr63XQA+dTV1VA8fe4DvwQ jcsDSr8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIy3qug/rnFv/93LlELv MrV9hetzbpdQnUmLar8X3vYTnBVpJfTUMmqWtV9LYPy6uA4wUNHhAwoHSZSR4pbA YqTIgVcwusDPYhNCVWliu5J8KYXfuSXB7NEDPPviAzOGy9YQmWr+JplpHu51I11F IFEUs7rfM3vOd//S6QIBRVO2m8+f1KYzdkAlhm4rsLsoQAaunBKeoOV2BZm9unzv E4EmEPlxIIt2SlXI5aJpJlL1w4r8Kz29xzHpqdxAxSuXMeto5xX2uqcbel1XZQG9 gx8ug6pQ8KXlaocxNy9ou7tMDszVXFPBlOg/jKwZCS6AFlm7bB/gt0U4Ei+ecs4h 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13981935891738055080902600380022782373 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suffolk' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TowneBank' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.townebankmortgage.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24307144915075119730630110338814518520152574253491418217890466710829419019375515003587809230107374647290082216329479570382001834943397919502739062368810293765140456738259798563202420130823788469423626807153222297460457162938299190311387146388996298564729254806338835325850061672284974169793982290891588684949357196578095921550259636258445198554582884741110105942831135685057941827576185728202288290420185984391068346619777163064130249972046156562345395507957473925752345823881837123246740216781728434949101858438825175634121535345700823412480737960651962092634663078988804946986744493516685895170328575555169143366099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e70e9be399dc584655c102e4335098e2abba2432 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.townebankmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townebankmortgage.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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